An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/de-jcup/sttk

STTK - Security Threatmodel Toolkit

agile asciidoc c4model generator model plantuml security threatmodeling

Last synced: 01 Apr 2025

https://github.com/theunknownsoul/k8s-security

CLI tool for Kubernetes security inspection.

hacking kubernetes security security-tools trivy

Last synced: 14 May 2026

https://github.com/petrkozorezov/arkenfox-userjs-nix

The daily auto updated nix version of arkenfox/user.js.

anti-fingerprinting anti-tracking arkenfox firefox mozilla nix nixos privacy security settings

Last synced: 14 May 2026

https://github.com/peckadesign/securityheaders

Knihovna pro snadné nastavení bezpečnostních HTTP hlaviček

content-security-policy csp http-header security

Last synced: 07 May 2025

https://github.com/umaarov/auth-fw

Complete session management, 2FA, RBAC, email verification, account lockout, suspicious login detection, advanced session tracking across devices and etc - all in one package

2fa access-control account-lockout authentication email-verification jwt laravel mfa php8 rbac security session-management

Last synced: 18 Apr 2026

https://github.com/jon2g/cuckoonet

A full implementation of the Cuckoo Sandbox Rest 2.0.7 API

automation c-sharp cuckoo-sandbox dotnet security

Last synced: 13 May 2026

https://github.com/copyleftdev/1337-fish-rng

1337-fish-rng leverages the unpredictable movements of fish to generate true randomness from live video feeds. This innovative project merges natural phenomena with digital technology to provide a unique, open-source tool for enhancing security and research.

entropy experiment natural-phenomena random-number-generator security

Last synced: 03 Mar 2025

https://github.com/gregorykogan/file-scanner

A comprehensive C++ project demonstrating modern software engineering principles, implemented as a multithreaded malicious file scanner for a Kaspersky internship assignment.

c-plus-plus clean-architecture cmake command-line-tool concurrency cpp cpp17 cross-platform doxygen googletest md5 multithreading portfolio-project scanner security solid-principles

Last synced: 03 Jul 2026

https://github.com/superkpk99/anonsurf-multiplatform

A powerful cross-platform anonymization tool that routes internet traffic through the Tor network for enhanced privacy. Works on Debian, Arch, and RPM-based Linux distributions. Fork of ParrotSec/anonsurf with enhanced features.

anonsurf anonymity archlinux cybersecurity cybersecurity-tools debian fedora linux privacy proxy security tor

Last synced: 10 Apr 2025

https://github.com/007jedgar/pasteproof

Open source browser extension that detects and prevents accidental PII and secrets from being pasted into web forms.

browser-extension chrome-extension data-loss-prevention data-protection dlp firefox-addon open-source privacy react secrets-detection security self-hosted typescript workflow

Last synced: 16 Feb 2026

https://github.com/mirayatech/password-generator

A password generator that generates 16 characters of strong passwords that no one can access of it.

css3 html5 javascript password-generator pasword security tech

Last synced: 05 Apr 2026

https://github.com/dictovod/process-monitor

Telegram-бот мониторинга процессов Linux в реальном времени. Уведомляет о новых процессах, управление фильтрами прямо из чата — чёрный/белый список, маски regex, тихие часы, пороги CPU/RAM, статистика, экспорт списков файлом. Автообновление с сохранением токена.

debian linux monitoring notifications process-monitor python regex security systemd telegram-bot

Last synced: 17 Jun 2026

https://github.com/afterdarksys/env-leak-scanner

Scan your codebase for exposed secrets and environment variables

ci-cd cli credentials devops environment-variables leak-detection python scanning secrets security

Last synced: 15 Jan 2026

https://github.com/aghae/ejwt-nuxt2

jwt for nuxt

json jwt nuxt security token

Last synced: 04 May 2026

https://github.com/fadilxcoder/htpasswd

Password protected site with Basic Authentication

authentication php poc security

Last synced: 12 Jun 2026

https://github.com/richardslater/cybersecurity

Cybersecurity cheatsheets, payloads, scripts, tools and playbooks

cybersecurity information-security infosec it-security pentesting security security-tools

Last synced: 29 Jun 2026

https://github.com/pandawan12/hai-guardrails

A TypeScript library providing a set of guards for LLM (Large Language Model) applications

defence governance guardrails guards hai halucination human-ai llm-guardrails presidio prompt-injection redaction security typescript

Last synced: 05 May 2025

https://github.com/jwilk/skeptica

find out which CAs sites use

security

Last synced: 20 Mar 2025

https://github.com/jwilk/crafted.deb

various generators of crafted *.deb packages

security

Last synced: 20 Mar 2025

https://github.com/sgnn7/openssl-fips

OpenSSL FIPS-compliant 140-2 cryptographic module canister for Docker container targets.

containers cryptography docker docker-container encryption fips fips-140-2 fips-build fips140-2 openssl openssl-tools security trusted-execution-environment

Last synced: 16 May 2026

https://github.com/mlukman/securilex

Security provider for Silex

authentication-factories firewall security silex

Last synced: 26 Mar 2025

https://github.com/meigma/blob

Sign and attest file archives in OCI registries. Carry cryptographic provenance wherever they go.

archive files oci provenance security

Last synced: 25 Jan 2026

https://github.com/felixseptem/itsrisky

a data signatrue library powered by hmac

golang hmac security serialization signature

Last synced: 28 Jun 2026

https://github.com/aram-ibrahim/2fa-server-scripts

Two Factor authentication scripts for server side.

2fa nodejs security

Last synced: 15 May 2026

https://github.com/turnerlabs/aws-forensics-ir

Tools for IR & Forensic data gathering in AWS

aws incident-response security

Last synced: 17 Mar 2025

https://github.com/matthewdeanmartin/hermetic

run a python tool with certain APIs disabled

cli-tool configuration development-tools python security

Last synced: 02 Feb 2026

https://github.com/jose-blockchain/ledger-threat-modelling

Ledger Hardwallet Threat Modelling and Attack Planning

blockchain blockchain-security-tools ledger ledger-wallet security wallet

Last synced: 16 Feb 2026

https://github.com/brehldev/opensearch-filter-proxy

Rust proxy for OpenSearch that automatically applies global security filters to search queries. Acts as a transparent proxy to ensure restricted data is never exposed.

axum elasticsearch opensearch rust security

Last synced: 15 May 2026

https://github.com/ngvuthdanhh/certificate-cryptography-leeds-clickstart-futurelearn

Learning notes, labs, cheatsheets, and certificate for An Introduction to Cryptography by University of Leeds & Click Start on FutureLearn. Covers symmetric/asymmetric encryption, hashing, signatures, and cryptographic protocols.

aes cryptography decryption encryption futurelearn githublearning rsa security university-of-leeds

Last synced: 25 Jan 2026

https://github.com/maximilianfeldthusen/safety-conscious-linux

This code is a safety-conscious Linux monitoring program

bash linux monitoring-tool safety-critical security systemd watchdog

Last synced: 13 Apr 2026

https://github.com/wi11dey/pwdgen.el

Generate secure passwords without leaving Emacs

emacs lisp password password-generator security

Last synced: 17 Mar 2025

https://github.com/ruffinweb/Devops-Guide

Detailed guide for setting up a backend on a VPS.

bash devops linux networking security ssh system-administration

Last synced: 01 Jul 2026

https://github.com/faablecloud/faableauth-examples

🔐 Authentication and authorization service for frontends and APIs

authentication authorization faable security

Last synced: 06 Apr 2026

https://github.com/ngvuthdanhh/certificate-security-risk-management-disasterready

Learning notes, labs, and resources from the Security Risk Management Essentials professional certificate by DisasterReady. Includes risk frameworks, assessment methods, crisis management, and business continuity planning.

compliance crisis-management cyber-resilience disasterready githublearning governance risk-management security

Last synced: 25 Jan 2026

https://github.com/canaxs/spring-chat

Messaging application developed using spring boot (Websocket dependency used)

jwt-authentication security spring-boot websocket

Last synced: 14 May 2026

https://github.com/lloydmeta/less-is-moar-union_only-perms-model

Implementing selective subtraction of perms via addition of inverse permissions in the ES Security model

authorisation authz elasticsearch poc proof-of-concept security union

Last synced: 02 May 2026

https://github.com/fadilxcoder/reverse-proxy

PHP reverse proxy - [https://github.com/fadilxcoder/hfx-api.git] [https://github.com/fadilxcoder/cryoto-js.git]

php reverse-proxy security

Last synced: 15 Jun 2026

https://github.com/fadilxcoder/cryoto-js

Crypto - Client of hfx-api - Reverse proxy - [https://github.com/fadilxcoder/reverse-proxy.git] [https://github.com/fadilxcoder/hfx-api.git]

client mobile-app rest-api security

Last synced: 19 Jun 2026

https://github.com/erseco/ugr_seguridad_sistemas_operativos

Practicas de Seguridad en Sistemas Operativos (SSO) del Grado en Ingeniería Informática de la Universidad de Granada (UGR)

operating-systems security ugr

Last synced: 12 Mar 2025

https://github.com/ebrasha/abdal-filewatcher

"Abdal FileWatcher" by Ebrahim Shafiei: A cross-platform, open-source file monitoring tool tailored for security experts.

abdal abdal-filewatcher abdal-security-group ebrasha forensics pentest security

Last synced: 26 Mar 2025

https://github.com/exfil0/file-extension-spoofing-tool-fest

This tool is designed for file extension spoofing. It allows users to create a copy of a file with a spoofed extension. This can be useful in various testing scenarios, including security testing and penetration testing exercises. The tool uses a special Unicode character to reverse the order of characters in the spoofed extension.

attack-defense character characters extension file pentesting python3 reverse security spoofing testing unicode

Last synced: 01 Jul 2026

https://github.com/muthu-d-anonysm/npm2guard

Open-source tool to scan GitHub organizations for vulnerable NPM packages compromised in the September 2025 supply chain attack. Automatically analyzes nested dependency files in all repositories to help startups, freelancers, and dev teams manage supply chain risks without dedicated security experts.

bugbounty bugbounty-tool cyberattack cybersecurity devsecops npm npm-module npm-package npmjs security security-audit security-tools supply-chain

Last synced: 15 May 2026

https://github.com/ashharr/invoice-manager

A full stack invoice manager with Spring boot REST API and UI in angular. Security enabled and robust.

angular invoice-management java javascript rest-api security spring-boot

Last synced: 04 May 2026

https://github.com/danielwhatmuff/npm-audit-checker

Works with npm audit to check vulnerability severities and pass/fail based on a threshold

npm npm-audit security severity severity-vulnerabilities vulnerability

Last synced: 16 May 2026

https://github.com/codejupiter/frontguard-agent

Lightweight runtime security agent for detecting script injection, iframe injection, and suspicious DOM mutations.

browser dom frontend-security mutation-observer runtime-security security testing typescript

Last synced: 15 May 2026

https://github.com/daniel-km/omeka-s-module-lockout

Module for Omeka S that limits the rate of login attempts for each IP (not by auth cookie) in order to avoid brute-force attacks.

login omeka-s omeka-s-module security

Last synced: 14 May 2026

https://github.com/mcp-shark/aauth-explorer

Interactive knowledge graph for the AAuth protocol — visualize 72 protocol flows across signing, access, mission, and advanced patterns.

aauth agents ai-agents authenticaiton authorization protocol security

Last synced: 11 Jun 2026

https://github.com/t7dela/shadowtool

This script is designed to automatically generate seed phrases and check balances for Tron networks. If a wallet with a non-zero balance is found, the wallet's information (address, mnemonic, private key, and balances) is logged and saved to a file named result.txt.

automation code-analysis code-quality code-review continuous-integration development devops dynamic-analysis github opensource quality-assurance scanning security shadowtool software software-composition-analysis static-analysis testing tool vulnerability

Last synced: 10 Apr 2025

https://github.com/rsclarke/terraform-cloudflare-no-email

SPF, DKIM and DMARC records for zones which do not send email.

cloudflare email security spam-protection terraform

Last synced: 04 Apr 2026

https://github.com/pragati-i/loginsystem

Java login system with brute-force protection and attempt logging.

brute-force-detection java login-system security

Last synced: 07 May 2025

https://github.com/arcangelo7/secure-mail-server-docs

Comprehensive documentation for setting up and managing a secure mail server. Includes detailed guides on Haraka, Mailcow, DNS configuration, firewall rules, Wireguard VPN, and Caddy setup to optimize security and reliability.

caddy-server dns-configuration documentation email-server firewall haraka linux-server mail-security mailcow networking privacy security self-hosting vpn wireguard

Last synced: 12 Apr 2025

https://github.com/krayzpipes/trickt

Search data for trickiness and obfuscation.

deobfuscation incident-response security

Last synced: 09 Apr 2026

https://github.com/boundarylogic/privaci

In-VPC PostgreSQL data-masking engine — stream production replicas into safe, FK-intact staging databases. Deterministic, auditable, ELv2.

anonymization data-masking database devops docker pii postgresql privacy python security

Last synced: 01 Jul 2026

https://github.com/mehmettopcu/goslo.policy.server

OpenStack Oslo Policy Server - A centralized policy enforcement service for OpenStack services with dynamic policy updates and REST API support.

authorization golang microservices openstack policy rbac rest-api security yaml-configuration

Last synced: 01 Jul 2026

https://github.com/janpreet/waf-vision

A visual simulator showing how WAF processes web requests in real-time. See your browser fingerprint & security checks live!

devops education security waf web-security

Last synced: 05 Mar 2026

https://github.com/iamcryptoki/wordsalt

A simple Go module to generate strong, random security keys for WordPress.

go keys salt security wordpress

Last synced: 16 Apr 2026

https://github.com/fabaff/remediar

Remediar is an issue and vulnerability tracker framework

portscanner python3 security vulnerabilities vulnerability-scanners

Last synced: 17 Jun 2025

https://github.com/bs5q/honeypot

Honeypot detects online threats, alerts, and reports for safer internet environments. 🐝

checker golang honeypot honeypotcheck malicous sec security

Last synced: 15 Jan 2026

https://github.com/rix4uni/gosqli

gosqli is a fast and simple tool for detecting blind SQL injection vulnerabilities. It supports scanning URLs with custom payloads, parallel requests, and response time-based verification.

bug-bounty bugbounty bugbountytips hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools sql-injection sqli threat-intelligence

Last synced: 29 Oct 2025

https://github.com/helias/catcrypt

cat your netCDF file removing the decrypted file txt

bashrc mcrypt password security shell-script sysadmin

Last synced: 18 May 2026

https://github.com/dpaulos6/digestify

Digestify is a general security tools website, like string hashing, key generation, etc.

educational encryption-decryption hashing key-generation password-generator secrets security security-tools

Last synced: 09 Jul 2025

https://github.com/frewsxcv/xn--80aa0cbo65f.com

website for cyrillic PayPal IDN

homograph-attack paypal security

Last synced: 20 Jan 2026

https://github.com/viamus/locker-it

LockerIt is a Windows-first standalone encrypted vault for passwords, Recovery Kits, and future secure files.

aes-gcm dotnet dpapi local-first password-manager recovery-kit security sqlite windows wpf

Last synced: 01 Jul 2026

https://github.com/igorfonseca05/curso-ciberseguranca

Repositório dedicado aos estudos de cibersegurança, com práticas e conceitos essenciais. 🔐🛡️ Inclui scripts, anotações e experimentos sobre proteção de sistemas e redes. 💻⚡

cibersecurity cryptography hash igorfonseca05 security webdevelopment

Last synced: 17 Mar 2025

https://github.com/pyenb/emkei.cz

Send emails to, and from any address you want, in bulk

bulk email email-sender python python3 security security-tools

Last synced: 17 Mar 2025

https://github.com/ptkvaibhav/opentext-application-security-parser-burp

An enterprise-grade Fortify Software Security Center (OpenText Application Security) plugin to ingest, parse, and visualize PortSwigger Burp Suite XML scan results.

burp-suite burpsuite burpsuitepro fortify fortify-api fortify-integration fortify-parser-plugin fortify-ssc gradle java opentext opentext-sast parser plugin security ssc vulnerability-management vulnerability-management-platform

Last synced: 06 Apr 2026

https://github.com/cockroachdb/security-utils

Security, IAM related utilities for CockroachDB

authentication authorization jwt security

Last synced: 16 Feb 2026

https://github.com/howprogrammingworks/xss

Cross-site Scripting (XSS)

owasp security vulnerability xss

Last synced: 06 Mar 2026

https://github.com/humzaakhtarr/elasticsearch-using-sysmon

A step-by-step guide for setting up an SIEM using the Elastic Web Portal and Sysmon. You will learn how to generate security events on the windows machine, set up Sysmon on your windows machine. Generate few events by writing few commands on Windows PowerShell and forward records to the SIEM, and query and analyze the logs using Kibana in the SIEM.

cybersecurity elasticsearch elk-stack kibana security sysmon

Last synced: 17 Jun 2025

https://github.com/kubex-ecosystem/shellscript_template

This repository provides a robust template for writing secure, maintainable, and modular Bash scripts. It includes best practices for error handling, logging, colorized output, and safe environment setup. The structure is designed to help you avoid common pitfalls in shell scripting, such as accidental root execution, function name collisions, etc.

linux security shell templates

Last synced: 18 May 2026

https://github.com/turbot/steampipe-mod-tailscale-compliance

Run individual controls or full compliance benchmarks across all of your Tailscale resources using Powerpipe and Steampipe.

compliance hacktoberfest network powerpipe powerpipe-mod security steampipe steampipe-mod tailscale

Last synced: 30 Jun 2026

https://github.com/peter-mcconnell/docker-ettercap

ettercap-graphical running in a container

docker ettercap security

Last synced: 01 Jun 2026

https://github.com/operavaria/lfpch

Quickly and securely check if your password is safe

c-language gtk4 haveibeenpwnd password password-checker password-generator security

Last synced: 17 Feb 2026

https://github.com/loplop-h/mcpguard

Security scanner for MCP server configurations. 10/10 OWASP MCP Top 10 coverage. Auto-fix, tool poisoning detection, rug pull alerts.

ai claude-code cli mcp model-context-protocol owasp python scanner security tool-poisoning vulnerability-scanner

Last synced: 06 Apr 2026

https://github.com/grandroyl9902m/privatebin

A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.

crypto cryptography encrypted hacktoberfest one-time paste pastebin php security self-destroy self-hosted self-hosting

Last synced: 22 Jun 2025

https://github.com/vagnerbellacosa/061_entendendoimportanciamodelagemsegurancaconstrucaoapis

Entendendo a Importância da Modelagem e Segurança na Construção de APIs

api architecture boas-praticas full-stack java lab rest rest-full security

Last synced: 31 May 2026

https://github.com/winscripter/dotobfs

dotObfs is a library that can help you obfuscate up to 7 programming languages with .NET

csharp dotnet dotnetframework obfuscator security

Last synced: 01 Jul 2026

https://github.com/dev-mohitbeniwal/echo

Echo is an open-source attribute-based access control (ABAC) system in Go. It offers fine-grained access control, high-performance policy evaluation with Neo4j, real-time updates, comprehensive auditing, caching, event-driven architecture, and a RESTful API. Docker support included.

abac access-control attribute-based-access-control auditing authorization caching golang neo4j open-source security

Last synced: 12 Apr 2025

https://github.com/alexkander/loopback-allowed-properties-mixin

Loopback mixin to set what fields can be received in request.

loopback mixin security strongloop web

Last synced: 27 Mar 2025

https://github.com/tn3w/stem-rs

A complete Rust library for Tor control protocol — build privacy-focused applications with type-safe, async-first APIs

anonymity async control-protocol cryptography onion-routing privacy rust security socks-proxy stem tokio tor tor-controller

Last synced: 11 Jan 2026